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Forward first request from an authorized client to 
the KDC requesting access to the application 

server 
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KDC verifies that the client is authorized to access 
the application server 
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KDC grants access to the authorized client and 
forwards ticket to the client 
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Client uses the ticket to access desired server 
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KDC receives a second request to access the 
application server while the ticket is still valid 
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KDC denies the second request to the access 
application server 
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